OWASP PHP-RBAC

PHP-RBAC is the de-facto authorization library for PHP. It provides developers with NIST Level 2 Standard Role Based Access Control and more, in the fastest implementation yet.

Introduction

Welcome to PHP-RBAC OWASP page. PHP-RBAC is an attempt to make computer software more secure by making role based access control practice much easier and safer. You can visit the official website of PHP-RBAC where tutorials and documentations are available at http://phprbac.net

Description

PHP-RBAC is a standard NIST Level 2 Hierarchical Role Based Access Control library implemented as a library for PHP. It allows perfectly maintainable function-level access control for enterprise and small applications or even frameworks.

Since implementation of NIST Level 2 Hierarchical RBAC is quite complicated, there are very few similar libraries and most of them do not adhere to standards. PHP-RBAC is one of the fastest implementations (relying on a SQLite or MySQL backend) and has been tested in industry for more than three years.

Licensing

OWASP PHP-RBAC is free to use. It is licensed under the Creative Commons Attribution-ShareAlike 3.0 license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

Others

Involvement in the development and promotion of PHP-RBAC is actively encouraged!

You do not have to be a security expert in order to contribute.

Some of the ways you can help:

Reporting Bugs

Asking Questions

Writing Tutorials and Articles

Tweating and Facebooking about PHP-RBAC

Talking about PHP-RBAC

PROJECT INFOWhat does this OWASP project offer you?

RELEASE(S) INFOWhat releases are available for this project?

what

is this project?

Name: OWASP PHPRBAC Project (home page)

Purpose: PHPRBAC is a standard NIST Level 2 Hierarchical Role Based Access Control library implemented as a library for PHP. It allows perfectly maintainable function-level access control for enterprise and small applications or even frameworks.

Since implementation of NIST Level 2 Hierarchical RBAC is quite complicated, there are very few similar libraries and most of them do not adhere to standards. PHP RBAC is one of the fastest implementations (relying on a SQLite or MySQL backend) and has been tested in industry for more than three years.